Network Monitoring Apparatus, and Remote Encryption and Remote Activation Method, Device and System Thereof

ABSTRACT

A network monitoring apparatus, and a remote encryption and remote activation method, device and system thereof are provided. The method includes the following steps: receiving an encrypted activation password sent by a client terminal; decrypting the encrypted activation password to obtain an original activation password; determining whether the original activation password meets a predetermined password strength requirement; when the original activation password meets the predetermined password strength requirement, activating the network monitoring apparatus and setting the original activation password as an administrator password; and returning information indicating that the network monitoring apparatus is successfully activated to the client terminal. A network monitoring apparatus, an encryption method of a network monitoring apparatus based on a client terminal, a client terminal, and a remote activation system based on a network monitoring apparatus are also provided. The present disclosure combines an asymmetric encryption mode and a symmetric encryption mode, so as to enhance a security of an activation process.

TECHNICAL FIELD

The present disclosure relates to the technical field of networksecurity, and in particular to a network monitoring apparatus, and aremote encryption and remote activation method, device and systemthereof.

BACKGROUND

At present, in a security monitoring industry, factory settings of anetwork monitoring apparatus have the following problems.

The factory settings of the network monitoring apparatus have a defaultusername and default password (e.g., a default administrator username:admin, and a default administrator password: 12345). A current generalmethod for a situation of a default username and a default password isto remind a user that the user should change the default password whenthe user logins in. However, this reminder may be ignored by the user.Actually, few users will choose to change default passwords. Under thissituation, the network monitoring apparatus adopting the defaultpassword, particularly when being connected to a World Wide Web, is morelikely to be illegally controlled.

SUMMARY

At least some embodiments of the present disclosure provide a networkmonitoring apparatus, and a remote encryption and remote activationmethod, device and system thereof.

In one embodiment of the present disclosure, a remote activation methodof a network monitoring apparatus is provided. The method includes:receiving an encrypted activation password sent by a client terminal;decrypting the encrypted activation password to obtain an originalactivation password; determining whether the original activationpassword meets a predetermined password strength requirement; when theoriginal activation password meets the predetermined password strengthrequirement, activating the network monitoring apparatus and setting theoriginal activation password as an administrator password; and returninginformation indicating that the network monitoring apparatus issuccessfully activated to the client terminal.

In an exemplary embodiment, receiving the encrypted activation passwordsent by the client terminal includes: receiving a public key sent by theclient terminal and generated via a first algorithm, encrypting aoriginal random string generated by the network monitoring apparatus viathe public key to generate an encrypted random string, returning theencrypted random string to the client terminal, and the encrypted randomstring is decrypted by the client terminal via a private key of thefirst algorithm to obtain the original random string; and receiving anactivation password sent by the client terminal and encrypted via asecond algorithm, and the activation password is generated by encryptingan original activation password via the second algorithm, and a key ofthe second algorithm is the original random string.

In an exemplary embodiment, decrypting the encrypted activation passwordto obtain the original activation password includes: decrypting theactivation password via a second algorithm to obtain the originalactivation password.

In an exemplary embodiment, before receiving the public key sent by theclient terminal and generated via the first algorithm, furtherincluding: reporting a Media Access Control (MAC) address to the clientterminal, and the MAC address is used for uniquely identifying anidentity of the network monitoring apparatus.

In an exemplary embodiment, receiving the public key sent by the clientterminal and generated via the first algorithm includes: receiving apublic key matched with an MAC address of the network monitoringapparatus, sent by the client terminal and generated via the firstalgorithm.

In an exemplary embodiment, returning the encrypted random string to theclient terminal further includes: reporting an MAC address to the clientterminal, and the MAC address is used for uniquely identifying anidentity of the network monitoring apparatus.

In an exemplary embodiment, receiving the activation password sent bythe client terminal and encrypted via the second algorithm includes:receiving an activation password matched with an MAC address of thenetwork monitoring apparatus, sent by the client terminal and encryptedvia the second algorithm.

In an exemplary embodiment, the first algorithm is a RSA asymmetricencryption algorithm.

In an exemplary embodiment, the second algorithm is an AdvancedEncryption Standard (AES) symmetric encryption algorithm.

In the remote activation method of the network monitoring apparatusprovided in at least some embodiments of the present disclosure, adefault password is not set for the network monitoring apparatus, andthe network monitoring apparatus cannot be used before being activated,that is, the network monitoring apparatus is able to be used after beingactivated by a user, so that an old bad habit of always using thedefault password by the user is changed. Moreover, an originalactivation password input by the user is subjected to strength check,and a too simple password is not allowed to be used for activating thenetwork monitoring apparatus, such that an illegal user cannot remotelycontrol the monitoring apparatus by using the default password orguessing a current password that is too simple, thereby improvingpassword security. Besides, at least one embodiment of the presentdisclosure combines a RSA asymmetric encryption algorithm and an AESsymmetric encryption algorithm in a process of encrypting an originalactivation password input by a user, and it is difficult to crack theactivation password input by the user from a network, thereby furtherenhancing a security of an activation process.

In another embodiment of the present disclosure, a network, monitoringapparatus is provided. The network monitoring apparatus includes: aninterface, arranged to receive an encrypted activation password sent bya client terminal; an encryption and decryption element, arranged todecrypt the encrypted activation password to obtain an originalactivation password; a determination element, arranged to determinewhether the original activation password meets a predetermined passwordstrength requirement; an activation element, arranged to activate, whenthe original activation password meets the predetermined passwordstrength requirement, the network monitoring apparatus and set theoriginal activation password as an administrator password; and theinterface, further arranged to return information indicating that thenetwork monitoring apparatus is successfully activated to the clientterminal.

In an exemplary embodiment, the interface is arranged to receive apublic key sent by the client terminal and generated via a firstalgorithm, and return an encrypted random string the client terminal,and the encrypted random string is obtained by encrypting, by theencryption and decryption element, a original random string generated bythe network monitoring apparatus via the public key, and the encryptedrandom string is decrypted by the client terminal via a private key ofthe first algorithm to obtain the original random string; the interfaceis further arranged to receive an activation password sent by the clientterminal encrypted via a second algorithm, and the activation passwordis generated by encrypting, by the client terminal, the originalactivation password via the second algorithm, and a key of the secondalgorithm is the original random string.

In an exemplary embodiment, the encryption and decryption element isarranged to decrypt the encrypted activation password via a secondalgorithm to obtain the original activation password.

In an exemplary embodiment, the interface is further arranged to, beforereceiving the public key sent by the client terminal and generated viathe first algorithm, report a Media Access Control (MAC) address to theclient terminal, and the MAC address is used for uniquely identifying anidentity of the network monitoring apparatus.

In an exemplary embodiment, the interface is arranged to receive apublic key sent by the client terminal and generated via the firstalgorithm includes the following step: receiving a public key matchedwith an MAC address of the network monitoring apparatus, sent by theclient terminal and generated via the first algorithm.

In an exemplary embodiment, the interface is further arranged to,besides returning the encrypted random string to the client terminal,report an MAC address to the client terminal, and the MAC address isused for uniquely identifying an identity of the network monitoringapparatus.

In an exemplary embodiment, the interface is arranged to receive theactivation password sent by the client terminal and encrypted via thesecond algorithm includes the following step: receiving an activationpassword matched with an MAC address of the network monitoringapparatus, sent by the client terminal and encrypted via the secondalgorithm.

In an exemplary embodiment, the first algorithm is a RSA asymmetricencryption algorithm.

In an exemplary embodiment, the second algorithm is an AdvancedEncryption Standard (AES) symmetric encryption algorithm.

In the network monitoring apparatus provided in at least someembodiments of the present disclosure, a default password is not set forthe network monitoring apparatus, and the device cannot be used beforebeing activated, that is, the network monitoring apparatus is able to beused after being activated by a user, so that an old bad habit of alwaysusing the default password by the user is changed. Moreover, an originalactivation password input by the user is subjected to strength check,and a too simple password is not allowed to be used for activating thedevice, such that an illegal user cannot remotely control the monitoringby using the default password or guessing a current password that is toosimple, thereby improving password security. Besides, the presentdisclosure combines a RSA asymmetric encryption algorithm and an AESsymmetric encryption algorithm in a process of encrypting originalactivation password input by a user, and it is difficult to crack theactivation password input by the user from a network, thereby furtherenhancing a security of an activation

In another embodiment of the present disclosure, an encryption method ofa network monitoring apparatus based on a client terminal is provided.The method includes: receiving an original activation password of anetwork monitoring apparatus; encrypting the original activationpassword; sending an encrypted activation password to the networkmonitoring apparatus; and after the network monitoring apparatus isactivated successfully according to the encrypted activation password,receiving information, indicating that the network monitoring apparatusis successfully activated, returned from the network monitoringapparatus.

In an exemplary embodiment, sending the encrypted activation password tothe network monitoring apparatus includes: generating a public key and aprivate key via a first algorithm, sending the public key to the networkmonitoring apparatus, and the public key is adopted by the networkmonitoring apparatus to encrypt the original random string generated bythe network monitoring apparatus to generate an encrypted random string;receiving the encrypted random string sent by the network monitoringapparatus, decrypting the encrypted random string via the private key toobtain the original random string, and setting the original randomstring as a key of a second algorithm; and encrypting the originalactivation password via the second algorithm, and sending the encryptedactivation password to the network monitoring apparatus.

In an exemplary embodiment, before sending the public key to the networkmonitoring apparatus, the method further includes: receiving a MediaAccess Control (MAC) address sent by the network monitoring apparatus,and the MAC address is used for uniquely identifying an identity of thenetwork monitoring apparatus.

In an exemplary embodiment, sending the public key to the networkmonitoring apparatus includes: sending a public key matched with an MACaddress of the network monitoring apparatus to the network monitoringapparatus.

In an exemplary embodiment, receiving the encrypted random string sentby the network monitoring apparatus further includes: receiving an MACaddress sent by the monitoring apparatus, and the MAC address is usedfor uniquely identifying an identity of the network monitoringapparatus.

In an exemplary embodiment, sending the encrypted activation password tothe network monitoring apparatus includes: sending an activationpassword matched with an MAC address of the network monitoring apparatusto the network monitoring apparatus.

In an exemplary embodiment, the first algorithm is a RSA asymmetricencryption algorithm, and the second algorithm is an Advanced EncryptionStandard (AES) symmetric encryption algorithm.

In the encryption method of the network monitoring apparatus based onthe client terminal provided in at least some embodiments of the presentdisclosure, a default password is not set for the network monitoringapparatus, and the network monitoring apparatus cannot be used beforebeing activated, that is, the network monitoring apparatus is able to beused after being activated by a user, so that an old bad habit of alwaysusing the default password by the user is changed. Moreover, an originalactivation password input by the user is subjected to strength check,and a too simple password is not allowed to be used for activating thedevice, such that an illegal user cannot remotely control the monitoringapparatus by using the default password or guessing a current passwordthat is too simple, thereby improving password security. Besides, thepresent disclosure combines a RSA asymmetric encryption algorithm and anAES symmetric encryption algorithm in a process of encrypting anoriginal activation password input by a user, and it is difficult tocrack the activation password input by the user from a network, therebyfurther enhancing a security of an activation process.

In another embodiment of the present disclosure, a client terminal isprovided. The client terminal includes: an interface, arranged toreceive an original activation password of a network monitoringapparatus; an encryption and decryption element, arranged to encrypt theoriginal activation password; and the interface, further arranged tosend an encrypted activation password to the network monitoringapparatus, and receive, after the network monitoring apparatus isactivated successfully according to the encrypted activation password,information, indicating that the network monitoring apparatus issuccessfully activated, returned from the network monitoring apparatus.

In an exemplary embodiment, the encryption and decryption element isarranged to generate a public key and a private key via a firstalgorithm, and send the public key to the network monitoring apparatusvia the interface, and the public key is adopted by the networkmonitoring apparatus to encrypt the original random string generated bythe network monitoring apparatus to generate an encrypted random string;the interface is arranged to receive the encrypted random string sent bythe network monitoring apparatus, decrypt the encrypted random stringvia the private key to obtain the original random string, and set theobtained original random string as a key of a second algorithm; and theencryption and decryption element is arranged to encrypt the originalactivation password via the second algorithm, and send the encryptedactivation password to the network monitoring apparatus the interface.

In an exemplary embodiment, the interface is further arranged to, beforesending the public key to the network monitoring apparatus, receive aMedia, Access Control (MAC) address sent by the network monitoringapparatus, and the MAC address is used for uniquely identifying anidentity of the network monitoring apparatus.

In an exemplary embodiment, the interface is arranged to send the publickey to the network monitoring apparatus includes the following step:sending a public key matched with an MAC address of the networkmonitoring apparatus to the network monitoring apparatus.

In an exemplary embodiment, the interface is arranged to receive theencrypted random string sent by the network monitoring apparatus furtherincludes the following step: receiving an MAC address sent by thenetwork monitoring apparatus, and the MAC address is used for uniquelyidentifying an identity of the network monitoring apparatus.

In an exemplary embodiment, the interface is arranged to send theencrypted activation password to the network monitoring apparatusincludes the following step: sending an activation password matched withan MAC address of the network monitoring apparatus to the networkmonitoring apparatus.

In an exemplary embodiment, the first algorithm is a RSA asymmetricencryption algorithm, and the second algorithm is an Advanced EncryptionStandard (AES) symmetric encryption algorithm.

In the client terminal provided in at least some embodiments of thepresent disclosure, default password is not set for the networkmonitoring apparatus, and the network monitoring apparatus cannot beused before being activated, that is, the network monitoring apparatusis able to be used after being activated by a user, so that an old badhabit of always using the default password by the user is changed.Moreover, an original activation password input by the user is subjectedto strength check, and a too simple password is not allowed to be usedactivating the device, such that an illegal user cannot remotely controlthe monitoring by using the default password or guessing a currentpassword that is too simple, thereby improving password security.Besides, the present disclosure combines a RSA asymmetric encryptionalgorithm and an AES symmetric encryption algorithm in a process ofencrypting original activation password input by a user, and it isdifficult to crack the activation password input by the user from anetwork, thereby further enhancing a security of an activation

In another embodiment of the present disclosure, a remote activationsystem based on a network monitoring apparatus is provided. The systemincludes: a client terminal, arranged to receive an original activationpassword of a network monitoring apparatus, and encrypt the originalactivation password; and the network monitoring apparatus, arranged toreceive an encrypted activation password from the client terminal,decrypt the encrypted activation password to obtain the originalactivation password, determine whether the original activation passwordmeets a predetermined password strength requirement, activate, when theoriginal activation password meets the predetermined password strengthrequirement, the network monitoring apparatus and set the originalactivation password as an administrator password, and return informationindicating that the network monitoring apparatus is successfullyactivated to the client terminal; the client terminal, further arrangedto send, after receiving the information indicating that the networkmonitoring apparatus is successfully activated, a prompt indicating thatthe network monitoring apparatus is successfully activated.

In an exemplary embodiment, the client terminal is arranged to receivethe original activation password of a network monitoring apparatus andencrypt the original activation password includes the following step:sending a public key generated via a first algorithm to the networkmonitoring apparatus, and the public key is adopted by the networkmonitoring apparatus to encrypt the original random string generated bythe network monitoring apparatus to generate an encrypted random string;and decrypting the encrypted random string returned by the networkmonitoring apparatus by using a private key generated via the firstalgorithm to obtain the original random string, setting the originalrandom string as a key of a second algorithm, encrypting the originalactivation password via the second algorithm to obtain an encryptedactivation password, and sending the encrypted activation password tothe network monitoring apparatus.

In the remote activation system based on the network monitoringapparatus provided at least some embodiments of the present disclosure,a default password is not set for the network monitoring apparatus, andthe network monitoring apparatus cannot be used before being activated,that is, the network monitoring apparatus is able to be used after beingactivated by a user, so that an old bad habit of always using thedefault password by the user changed. Moreover, an original activationpassword input by the user is subjected to strength check, and a toosimple password is not allowed to be used for activating the device,such that an illegal user cannot remotely control the monitoringapparatus by using the default or guessing a current password that istoo simple, thereby improving password security. Besides, the presentdisclosure combines a RSA asymmetric encryption algorithm and asymmetric encryption AES algorithm in a process of encrypting anoriginal activation input by a user, and it is difficult to crack theactivation password input by the user from a network, thereby furtherenhancing a security of an activation process.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to more clearly illustrate the technical solutions in theembodiments of the present disclosure or the related art, drawingsneeding to be used in the embodiments will be simply introduced.Obviously, the drawings described below are only some embodiments of thepresent disclosure. On the premise of no creative work, a person ofordinary skill in the art may also obtain other drawings according tothese drawings. As shown in the drawings, the above-mentioned and otherpurposes, features and advantages of the present disclosure will beclearer. The same drawing mark in all the drawings indicates the samepart. The drawings are not drawn by equal scaling according to actualsizes on purpose. Showing of the substance of the present disclosure isfocused.

FIG. 1 is a flowchart of a remote activation method of a networkmonitoring apparatus according to an exemplary embodiment of the presentdisclosure.

FIG. 2 is a flowchart of remote activation based on an Internet Protocol(IP) address according to an exemplary embodiment of the presentdisclosure.

FIG. 3 is a flowchart of remote activation based on an MAC addressaccording to an exemplary embodiment of the present disclosure.

FIG. 4 is a structural block diagram of a network monitoring apparatusaccording to an exemplary embodiment of the present disclosure.

FIG. 5 is a flowchart of an encryption method of a network monitoringapparatus based on a client terminal according to an exemplaryembodiment of the present disclosure.

FIG. 6 is a structural block diagram of a client terminal according toan exemplary embodiment of the present disclosure.

FIG. 7 is a structural block diagram of a remote activation system basedon a network monitoring apparatus according to an exemplary embodimentof the present disclosure.

FIG. 8 is an activation flowchart of a remote activation system based ona network monitoring apparatus according to an exemplary embodiment ofthe present disclosure.

DETAILED DESCRIPTION

In order to make a person skilled in the art better understand solutionsof the present disclosure, technical solutions in embodiments of thepresent disclosure will be clearly and completely described herein belowwith reference to drawings in the embodiments of the present disclosure.Obviously, the described embodiments are a part of the embodiments ofthe present disclosure, not all of the embodiments. On a basis of theembodiments of the present disclosure, all other embodiments obtained onthe premise of no creative work of a person of ordinary skill in the artfall within the scope of protection of the present disclosure.

It is important to note that the description and claims of the presentdisclosure and terms “first”, “second” and the like in the drawings areintended to distinguish similar objects, and do not need to describe aspecific sequence or a precedence order. It should be understood thatdata used in such a way can be exchanged under appropriate conditions,in order that the embodiments of the present disclosure described herecan be implemented in a sequence except sequences graphically shown ordescribed here. In addition, terms “include” and “have” and anyinflexions of the terms are intended to cover non-exclusive inclusions.For example, processes, methods, systems, products or devices containinga series of steps or elements do not need to clearly list those steps orelements, and may include other inherent steps or elements of theseprocesses, methods, products or devices, which are not clearly listed.

To solve problems in the related art, a network monitoring apparatus,and a remote encryption and remote activation method, device and systemof the network monitoring apparatus are provided in the presentdisclosure. By re-encrypting an original activation password input by auser, it is difficult to crack the original activation password on anetwork, thereby enhancing a security of an activation process. Herein,the network monitoring apparatus refers to a security monitoringapparatus which is provided with a network component and is accessed viaan IP address, such as a Digital Video Recorder (DVR), a Digital VideoServer (DVS), a Network Video Recorder (NVR), a Central Video Recorder(CVR), an IP Camera (IPC), and a transmission and display device.

FIG. 1 is a flowchart of a remote activation method of a networkmonitoring apparatus according to an exemplary embodiment of the presentdisclosure. It is important to note that an executed object of theremote activation method of the network monitoring apparatus is thenetwork monitoring apparatus. That is, the network monitoring apparatuscompletes the steps as follows.

At step S11, an encrypted activation password sent by a client terminalis received.

After booting, the user accesses the network monitoring apparatus viathe client terminal. Since the network monitoring apparatus is notactivated yet at this time, a non-activated device cannot execute anyother operations such as modification of an IP address. When the networkmonitoring apparatus is activated completely, network operations can berealized.

The network monitoring apparatus informs the client terminal that thenetwork monitoring apparatus can be used after the network monitoringapparatus is activated. And after the user inputs an original activationpassword, the client terminal encrypts the original activation passwordand then sends an encrypted activation password to the networkmonitoring apparatus.

At step S12, the encrypted activation password is decrypted to obtainthe original activation password.

The network monitoring apparatus decrypts the encrypted activationpassword received at step S11, so as to obtain the original activationpassword input by the user.

At step S13, it is determined whether the original activation passwordmeets a predetermined password strength requirement, and when theoriginal activation password meets the predetermined password strengthrequirement, the network monitoring apparatus is activated, and theoriginal activation password is set as an administrator password.

The network monitoring apparatus analyzes a complexity of the decryptedoriginal activation password, i.e., checks whether the complexity(namely password strength) of a password set by the user meets thepredetermined password strength requirement. For example, thepredetermined password strength requirement satisfies the followingconditions: combination of numbers, capital letters and lowercaseletters, and a password length is at least bits. At this time, when anoriginal activation password input by the user is U0123CRRT, a passwordis determined to be unqualified due to the fact that the password doesnot have a lowercase letter and a password length does not reach 8 bits.

When the original activation password meets the predetermined passwordstrength requirement, the network monitoring apparatus is activated. Andthe original activation password is set as an administrator password ofthe network monitoring apparatus. When the original activation passworddoes not meet the predetermined password strength requirement, thenetwork monitoring apparatus returns information to the client terminal,and this information is used for indicating that the network monitoringapparatus is not successfully activated.

At step S14, information indicating that the network monitoringapparatus is successfully activated is returned to the client terminal.

After being activated successfully, the network monitoring apparatussends information indicating that the network monitoring apparatus issuccessfully activated to the client terminal. The client terminalreminds the user that the network monitoring apparatus is successfullyactivated. And then the user logs in the network monitoring apparatus asan administrator by using the set original activation password, andperforms other network operations.

It is important to note that the remote activation method of the networkmonitoring apparatus of the present disclosure includes: an activationmode based on an IP address and an activation mode based on an MACaddress according to different network interaction modes. The differencebetween the two activation modes lies in network interaction, andencryption modes of the two activation modes are consistent.

The two activation modes are illustrated herein below with reference toFIG. 2 and FIG. 3 respectively.

FIG. 2 is a flowchart of remote activation based on an IP addressaccording to an exemplary embodiment of the present disclosure. Theactivation mode based on the IP address refers to activation viadirectional network connection to a certain network monitoringapparatus.

At step S21, a client terminal calls a first algorithm to generate apublic key and a private key, and the client terminal sends the publickey to a non-activated network monitoring apparatus.

At step S22, the network monitoring apparatus receives the public keygenerated by the client terminal via the first algorithm, and encryptsan original random string generated by the network monitoring apparatusvia the public key to generate an encrypted random string. The networkmonitoring apparatus returns the encrypted random string to the clientterminal. Specifically, the network monitoring apparatus encrypts anoriginal random string (a generated random string without any encryptionoperation) via the public key to obtain an encrypted random string, andreturns the encrypted random string to the client terminal.

At step S23, the client terminal decrypts the encrypted random stringvia the first algorithm to obtain the original random string.

At step S24, the client terminal sets the decrypted original randomstring as an encryption key of a second algorithm, and encrypts anoriginal activation password via the second algorithm to obtain anactivation password. Then, the activation password is sent to thenetwork monitoring apparatus.

At step S25, the network monitoring apparatus receives the activationpassword encrypted by the client terminal via the second algorithm.Since the encryption key is the original random string generated by thenetwork monitoring apparatus, the network monitoring apparatus decryptsthe activation password via the second algorithm to obtain the originalactivation password.

At step S26, the network monitoring apparatus determines whether acomplexity of the decrypted original activation password meets apredetermined password strength requirement. When a complexity of thedecrypted original activation password meets the predetermined passwordstrength requirement, the network monitoring apparatus is activated, andinformation indicating that the network monitoring apparatus issuccessfully activated is returned to the client terminal.

At step S27, the client terminal prompts the user that the networkmonitoring apparatus is successfully activated.

FIG. 3 is a flowchart of remote activation based on an MAC addressaccording to an exemplary embodiment of the present disclosure. Sincefactory settings of a network monitoring apparatus include a fixed IPaddress usually, IP addresses are identical when many devices are puttogether. In this case, an activation mode based on an IP address cannotvisually determine the network monitoring apparatus activated in thismode. An MAC is unique to each network monitoring apparatus. That is,the MAC address is used for uniquely identifying an identity of eachnetwork monitoring apparatus. Therefore, the activation mode based onthe MAC address solves the above-mentioned problem, and interaction isrealized via multicast.

It is important to note that in the following steps, since there aremultiple network monitoring apparatuses, network interaction between aclient terminal and multiple network monitoring apparatuses is realizedin a multicast form. Multicast is a one-to-multiple-point communicationmode, information sent between the network monitoring apparatuses andthe client terminal is sent to a specific multicast group firstly, andany network device joining into this multicast group receives data. TheMAC address is set as a matching basis of each network monitoringapparatus, so that the client terminal can visually determine thenetwork monitoring apparatus that is currently activated. The mode isparticularly applied to a scenario where network monitoring apparatusesare activated in batches, and network bandwidth is saved.

At step S31, an MAC address of a network monitoring apparatus isreported to a client terminal.

Each network monitoring apparatus sends an own MAC address to the clientterminal in a multicast form.

At step S32, the client terminal generates a public key and a privatekey via a first algorithm, and sends the public key and an MAC addressto the network monitoring apparatus.

At step S33, the network monitoring apparatus determines whether thereceived MAC address is matched with the MAC address of the networkmonitoring apparatus. And when the received MAC address is matched withthe MAC address of the network monitoring apparatus, step S34 isexecuted. In other words, the network monitoring apparatus receives thepublic key matched with the MAC address of the network monitoringapparatus, and step S34 is executed.

At step S34, the network monitoring apparatus generates an originalrandom string, encrypts the original random string via the public key toobtain an encrypted random string, and sends the encrypted random stringand the MAC address to the client terminal.

At step S35, the client terminal decrypts the encrypted random stringvia the private of the first algorithm to obtain the original randomstring, sets the original random string as a key of a second algorithm,encrypts an original activation password to obtain an activationpassword, and sends the activation password encrypted via the secondalgorithm and the address to the network monitoring apparatus.

At step S36, the network monitoring apparatus determines whether thereceived MAC address is matched with the MAC address of the networkmonitoring apparatus again, and when the received MAC address is matchedwith the MAC address of the network monitoring apparatus, step S37 isexecuted. In other words, the network monitoring apparatus receives thepublic key matched with the MAC address of the network monitoringapparatus, and step S37 is executed.

At step S37, the network monitoring apparatus decrypts the activationpassword via the second algorithm. Since the encryption key is theoriginal random string generated by the network monitoring apparatus,the network monitoring apparatus decrypts the activation password toobtain the original activation password.

At step S38, the network monitoring apparatus determines whether thecomplexity of the original activation password meets a predeterminedpassword strength requirement. When the complexity of the originalactivation password meets a predetermined password strength requirement,the network monitoring apparatus is activated, and informationindicating that the network monitoring apparatus is successfullyactivated is returned to the client terminal.

At step S39, the client terminal prompts the user that the networkmonitoring apparatus is successfully activated.

To sum up, the activation mode based on the MAC address is identical tothe activation mode based on the IP address in terms of encryptionalgorithms and passwords and are slightly different in networkinteraction. The activation mode based on the MAC address realizesone-to-multiple network interaction in a multicast form.

In one embodiment of the present disclosure, in the activation modebased on the IP address and the activation mode based on the MACaddress, the first algorithm is an asymmetric encryption RSA algorithm,and the second algorithm is an AES symmetric encryption algorithm.

The RSA algorithm is an asymmetric encryption algorithm, a pair of keysincluding a public key and a private key is generated by using the RSAalgorithm. The public key is open to public, and the private key is keptby a generator. In the present disclosure, the private key generated bythe RSA algorithm is kept by a generator client terminal. Duringencryption, is encrypted by using the public key, and the encrypted datais decrypted by using the private key. As long as a key is long enough,the password cannot be cracked. When the network monitoring apparatus isactivated each time, a new RSA key pair will be generated, and theprivate key is stored in a client terminal memory and is unlikely to becaptured.

The AES algorithm is a symmetric encryption algorithm. An encryptionparty or a decryption party encrypts or decrypts data by using the samekey. Although the symmetric encryption mode is unsecure, since theprevent disclosure performs encryption processing of the RSA algorithmon the key of the AES algorithm in advance, the key cannot be obtainedby sniffing and other means, thereby improving the security of thenetwork monitoring apparatus.

In the remote activation method of a network monitoring apparatusprovided in at least some embodiments of the present disclosure, adefault password is not set for the network monitoring apparatus, andthe network monitoring apparatus cannot be used before being activated,that is, the network monitoring apparatus is able to be used after beingactivated by the user, so that an old bad habit of always using thedefault password by the user is changed. Moreover, an originalactivation password input by the user is subjected to strength check,and a too simple password is not allowed to be used for activating thenetwork monitoring apparatus, such that an illegal user cannot remotelycontrol the monitoring apparatus by using the default password orguessing a current password that is too simple, thereby improvingpassword security. Besides, the present disclosure combines a RSAasymmetric encryption algorithm and an AES symmetric encryptionalgorithm in a process of encrypting the original activation passwordinput by the user, and it is difficult to crack the activation passwordinput by the user from a network, thereby further enhancing the securityof an activation process.

FIG. 4 is a structural block diagram of a network monitoring apparatusaccording to an exemplary embodiment of the present disclosure.

As shown in FIG. 4, the network monitoring apparatus provided in thepresent disclosure includes: an interface 41, an encryption anddecryption element 42, a determination element 43 and an activationelement 44.

Specifically, the interface 41 is arranged to receive an encryptedactivation password sent by a client terminal. That is, after the userinputs an original activation password, the client terminal encrypts theoriginal activation password, and then sends the encrypted activationpassword to the interface 41.

The encryption and decryption element 42 is arranged to decrypt theencrypted activation password to obtain the original activationpassword.

The determination element 43 is arranged to determine whether theoriginal activation password meets a predetermined password strengthrequirement. The determination element 43 analyzes the complexity of thedecrypted original activation password, i.e., checks whether thecomplexity (namely password strength) of a password set by the usermeets the predetermined password strength requirement. For example, thepredetermined password strength requirement satisfies the followingconditions: combination of numbers, capital letters and lowercaseletters, and a password length is at least 8 bits. At this time, when anoriginal activation password input by the user is U0123CRRT, thepassword is determined to be unqualified due to the fact that thepassword does not have a lowercase letter and the password length doesnot reach 8 bits.

The activation element 44 is arranged to activate, when the originalactivation password meets the predetermined password strengthrequirement, the network monitoring apparatus, and set the originalactivation password as an administrator password. Then, the interface 41returns information indicating that the network monitoring apparatus issuccessfully activated to the client terminal. When the originalactivation password does not meet the predetermined password strengthrequirement, the network monitoring apparatus returns information to theclient terminal, and this information is used for indicating that thenetwork monitoring apparatus is not successfully activated.

It is important to note that the remote activation method of a networkmonitoring apparatus of the present disclosure includes: an activationmode based on an IP address and an activation mode based on an MACaddress according to different network interaction modes, and thedifference between the two activation modes lies in network interaction,and encryption modes of the two activation modes are consistent.

The two activation modes are illustrated herein below respectively.

(1) An activation mode based on an IP address: activation viadirectional network connection to a certain network monitoringapparatus.

The client terminal calls a first algorithm to generate a public key anda private key, and the client terminal sends the public key to thenon-activated interface 41. The interface 41 receives the public keygenerated by the client terminal via the first algorithm, and returns arandom string encrypted via the public key to the client terminal. Theencrypted random string is obtained by encrypting, by the encryption anddecryption element 42, an original random string generated by thenetwork monitoring apparatus via the public key.

The client terminal decrypts the encrypted random string via the privatekey of the first algorithm to obtain the original random string, setsthe decrypted original random string as an encryption key of a secondalgorithm, encrypts an original activation password input by a user viathe second algorithm to obtain an activation password, and then sendsthe activation password to the interface 41. The interface 41 receivesthe activation password encrypted by the client terminal via the secondalgorithm. The encryption and decryption element 42 decrypts theactivation password via the second algorithm to obtain the originalactivation password. The determination element 43 determines whether thecomplexity of the original activation password meets a predeterminedpassword strength requirement. The activation element 44 activates, whenthe complexity of the original activation password meets thepredetermined password strength requirement, the network monitoringapparatus, and returns information indicating that the networkmonitoring apparatus is successfully activated to the client terminal.The client terminal further prompts the user that the network monitoringapparatus is successfully activated.

(2) An activation mode based on an MAC address: the MAC address isunique to each network monitoring apparatus. That is, the MAC address isused for uniquely identifying the identity of the network monitoringapparatus. Therefore, the activation mode based on an MAC address solvesthe above-mentioned problem, and network interaction is realized viamulticast. Since there are multiple network monitoring apparatuses,network interaction between a client terminal and multiple networkmonitoring apparatuses is realized in a multicast form. Multicast is aone-to-multiple-point communication mode, information sent between thenetwork monitoring apparatuses and the client terminal is sent to aspecific multicast group firstly, and any network device joining intothis multicast group receives data. The MAC address is set as a matchingbasis of each network monitoring apparatus, so that the client terminalcan visually determine the network monitoring apparatus that iscurrently activated. The mode is particularly applied to a scenariowhere network monitoring apparatuses are activated in batches, andnetwork bandwidth is saved.

Each network monitoring apparatus sends an MAC address to the clientterminal a multicast form. The client terminal generates a public keyand a private key via a first algorithm, and sends the public key and anMAC address to the interface 41. The interface 41 receives the returnedpublic key and MAC address generated via the first algorithm, and arandom string encrypted via the public key to the client terminal afterdetermining that the received MAC address is matched with the MACaddress of the present network monitoring apparatus. That is, after thenetwork monitoring apparatus receives the public key matched with theMAC address of the network monitoring apparatus, and the client terminaldecrypts encrypted random string via the private key of the firstalgorithm to obtain an original random string, sets the original randomstring as a key of a second algorithm, and encrypts an originalactivation password input by a user to obtain an activation password.

The interface 41 receives an activation password encrypted by the clientterminal via the second algorithm and MAC address, and the key of thesecond algorithm is an original random string. After determining thatthe MAC address received again is matched with the MAC address of thepresent network monitoring apparatus, that is after the networkmonitoring apparatus receives the activation password matched with theMAC address of the network monitoring apparatus, the encryption anddecryption element 42 decrypts the activation password via the secondalgorithm to obtain the original activation password. The determinationelement 43 determines whether the complexity of the original activationpassword meets a predetermined password strength requirement. Theactivation element 44 activates, when the complexity of the originalactivation password meets the predetermined password strengthrequirement, the network monitoring apparatus, and returns informationindicating that the network monitoring apparatus is successfullyactivated to the client terminal. The client terminal further promptsthe user that the network monitoring apparatus is successfullyactivated.

It is important to note that the interface 41, the encryption anddecryption element 42, the determination element 43 and the activationelement 44 run in a computer terminal as a part of the apparatus,functions implemented by elements can be executed via a processor in thecomputer terminal, and the computer terminal is a terminal device suchas a smart phone (such as Android phone and an iOS phone), a tabletcomputer, a palmtop, Mobile Internet Devices (MID), and a PAD.

In one embodiment of the present disclosure, in an activation mode basedon an IP address and an activation mode based on an MAC address, thefirst algorithm is a RSA asymmetric encryption algorithm, and the secondalgorithm is an AES symmetric encryption algorithm.

In the network monitoring apparatus provided in at least someembodiments of the present disclosure, a default password is not set fora network monitoring apparatus, and the network monitoring apparatuscannot be used before being activated, that is, the network monitoringapparatus is able to be used after being activated by a user, so that anold bad habit of always using the default password by the user ischanged. Moreover, an original activation password input by the user issubjected to strength check, and a too simple password is not allowed tobe used for activating the device, such that an illegal user cannotremotely control the monitoring apparatus by using the default passwordor guessing a current password that is too simple, thereby improvingpassword security. Besides, the present disclosure combines a RSAasymmetric encryption algorithm and an AES symmetric encryptionalgorithm in a process of encrypting an original activation passwordinput by a user, and it is difficult to the activation password input bythe user from a network, thereby further enhancing a security of anactivation process.

FIG. 5 is a flowchart of an encryption method of a network monitoringapparatus based on a client terminal according to an exemplary of thepresent disclosure. It is important to note that an executed object ofthe encryption method of the network monitoring apparatus based on theclient terminal is the client terminal, that is, the client terminalcompletes the steps as follows.

At step S51, an original activation password of a network monitoringapparatus is received.

At step S52, the original activation password is encrypted.

Specifically, the client terminal further sends the encrypted activationpassword to the network monitoring apparatus, and the network monitoringapparatus determines whether the original activation password meets apredetermined password strength requirement, activates, when theoriginal activation password meets the predetermined password strengthrequirement, the network monitoring apparatus, sets the originalactivation password as an administrator password, and returnsinformation indicating that the network monitoring apparatus issuccessfully activated to the client terminal.

When being used for activating the network monitoring apparatus, theencryption method of the network monitoring apparatus based on theclient terminal of the present disclosure includes: an activation modebased on an IP address and an activation mode based on an MAC addressaccording to different network interaction modes. The difference betweentwo activation modes lies in network interaction, and encryption modesof the two activation modes are consistent.

(1) Activation mode based on the IP address

The client terminal adopts a first algorithm to generate a public keyand a private key, and sends the public key to the network monitoringapparatus. The network monitoring apparatus encrypts an original randomstring generated by the network monitoring apparatus via the public keyto generate an encrypted random string. The client terminal receives theencrypted random string sent by the network monitoring apparatus,decrypts the random string that is returned by the network monitoringapparatus and encrypted via the public key, and sets an obtainedoriginal random string as a key of a second algorithm. Then, an originalactivation password input by a user is encrypted via the secondalgorithm to obtain an activation password, and the encrypted activationpassword is sent to the network monitoring apparatus Activation modebased on the MAC address

The client terminal receives MAC addresses reported by multiple networkmonitoring apparatuses. The MAC addresses are used for uniquelyidentifying the identity of the network monitoring apparatus. The clientterminal adopts a first algorithm to generate a public key and a privatekey, and sends the public key and the MAC address to the networkmonitoring apparatus. Specifically, the client terminal sends the publickey matched with the MAC address of the network monitoring apparatus tothe network monitoring apparatus. The network monitoring apparatusencrypts an original random string generated by the network monitoringapparatus via the public key to generate an encrypted random string.Then, the client terminal receives the encrypted random string sent bythe network monitoring apparatus. Further, the step of receiving, by theclient terminal, the encrypted random string sent by the networkmonitoring apparatus further includes: receiving an MAC address sent bythe network monitoring apparatus, and the MAC address is used foruniquely identifying the identity of the network monitoring apparatus.

The client terminal decrypts the encrypted random string via the privatekey, and sets the original random string as a key of a second algorithm.An original activation password input by a user is encrypted via thesecond algorithm to obtain an activation password, and the encryptedactivation password is sent to the network monitoring apparatus.Specifically, the client terminal sends an activation password matchedwith the MAC address of the network monitoring apparatus to the networkmonitoring apparatus.

In one embodiment of the present disclosure, in the activation modebased on the address and the activation mode based on the MAC address,the first algorithm is a RSA asymmetric encryption algorithm, and thesecond algorithm is an AES symmetric encryption algorithm.

At step S53, the encrypted activation password is sent to the networkmonitoring apparatus.

Since the encryption key is the original random string generated by thenetwork monitoring apparatus, the network monitoring apparatus decryptsthe activation password via the second algorithm to obtain the originalactivation password input by the user.

At step S54, after the network monitoring apparatus is activatedsuccessfully according to the encrypted activation password, theinformation indicating that the network monitoring apparatus issuccessfully activated is received.

The network monitoring apparatus determines whether the complexity ofthe decrypted original activation password meets a predeterminedpassword strength requirement. When the complexity of the decryptedoriginal activation password meets the predetermined password strengthrequirement, the network monitoring apparatus is activated, and theinformation indicating that the network monitoring apparatus issuccessfully activated is returned to the client terminal. Otherwise,the information indicating that the network monitoring apparatus is notsuccessfully activated is returned to the client terminal. The clientterminal prompts the user that the network monitoring apparatus issuccessfully activated.

In the encryption method of the network monitoring apparatus based onthe client terminal provided in at least some embodiments of the presentdisclosure, a default password is not set for the network monitoringapparatus, and the network monitoring apparatus cannot be used beforebeing activated, that is, the network monitoring apparatus is able to beused after being activated by a user, so that an old bad habit of alwaysusing the default password by the user is changed. Moreover, an originalactivation password input by the user is subjected to strength check,and a too simple password is not allowed to be used for activating thedevice, such that an illegal user cannot remotely control the monitoringapparatus by using the default password or guessing a current passwordthat is too simple, thereby improving password security. Besides, thepresent disclosure combines a RSA asymmetric encryption algorithm and anAES symmetric encryption algorithm in a process of encrypting anoriginal activation password input by a user, and it is difficult tocrack the activation password input by the user from a network, therebyfurther enhancing a security of an activation process.

FIG. 6 is a structural block diagram of a client terminal according toan exemplary embodiment of the present disclosure.

As shown in FIG. 6, the client terminal in this exemplary embodiment ofthe present disclosure includes: an interface 61 and an encryption anddecryption element 62.

Specifically, the interface 61 is arranged to receive an originalactivation password of a network monitoring apparatus.

The encryption and decryption element 62 is arranged to encrypt theoriginal activation password. The interface 61 further sends theencrypted activation password to the network monitoring apparatus, andthe network monitoring apparatus determines whether the originalactivation password meets a predetermined password strength requirement,activates, when the original activation password meets the predeterminedpassword strength requirement, the network monitoring apparatus, setsthe original activation password as an administrator password, andreturns information indicating that the network monitoring apparatus issuccessfully activated to the client terminal.

When being used to activate the network monitoring apparatus, the clientterminal in this exemplary embodiment of the present disclosureincludes: an activation mode based on an IP address and an activationmode based on an MAC address according to different network interactionmodes. The difference between two activation modes lies in networkinteraction, and encryption modes of the two activation modes areconsistent.

(1) Activation mode based on an IP address

The encryption and decryption element 62 adopts a first algorithm togenerate a public key and a private key, and sends the public key to thenetwork monitoring apparatus. The network monitoring apparatus encryptsan original random string generated by network monitoring apparatus viathe public key to generate an encrypted random string. The interface 61receives the encrypted random string sent by the network monitoringapparatus, decrypts the random string that is returned by the networkmonitoring apparatus and encrypted via the public key, and sets anobtained original random string as a key of a second algorithm. Then,the encryption and decryption element 62 encrypts an original activationpassword via the second algorithm to obtain an activation password, andsends the encrypted activation password to the network monitoringapparatus.

(2) Activation mode based on an MAC address

The interface 61 receives MAC addresses reported by multiple networkapparatuses, and the MAC addresses are respectively used for uniquelyidentifying an identity of each network monitoring apparatus. Theencryption and decryption element 62 adopts a first algorithm togenerate a public key and a private key, and sends the public key andthe address to the network monitoring apparatus. Specifically, theinterface 61 sends the public key matched with the MAC address of thenetwork monitoring apparatus to the network monitoring apparatus. Thenetwork monitoring apparatus encrypts an original random stringgenerated by the network monitoring apparatus via the public key togenerate an encrypted random string. Then, the interface 61 receives theencrypted random string sent by the network monitoring apparatus.Further, the operation of receiving, by the interface 61, the encryptedrandom string sent by the network monitoring apparatus further includes:receiving an MAC address sent by the network monitoring apparatus, andthe MAC address is used for uniquely identifying the identity of thenetwork monitoring apparatus. The encryption and decryption element 62decrypts the encrypted random string via the private key to obtain anactivation password, and sets the original random string as a key of asecond algorithm. The encryption and decryption element 62 encrypts anoriginal activation password via the second algorithm, and sends theencrypted activation password to the network monitoring apparatus.Specifically, the interface 61 sends an activation password matched withthe MAC address of the network monitoring apparatus to the networkmonitoring apparatus.

In one embodiment of the present disclosure, in the activation modebased on the IP address and the activation mode based on the MACaddress, the first algorithm is a RSA asymmetric encryption algorithm,and the second algorithm is an AES symmetric encryption algorithm.

The interface 61 sends the encrypted activation password to the networkmonitoring apparatus. Since the encryption key is the original randomstring generated by the network monitoring apparatus, the networkmonitoring apparatus decrypts the activation password via the secondalgorithm to obtain the original activation password.

The network monitoring apparatus determines whether the complexity ofthe decrypted original activation password meets a predeterminedpassword strength requirement. When the complexity of the decryptedoriginal activation password meets the predetermined password strengthrequirement, the network monitoring apparatus is activated, and theinformation indicating that the network monitoring apparatus issuccessfully activated is returned to the interface 61. Otherwise, theinformation indicating that the network monitoring apparatus is notsuccessfully activated is returned to the interface 61. The clientterminal prompts the user that the network monitoring apparatus issuccessfully activated.

In the client terminal provided in at least some embodiments of thepresent disclosure, a default password is not set for the networkmonitoring apparatus, and the network monitoring apparatus cannot beused before being activated, that is, the network monitoring apparatusis able to be used after being activated by a user, so that an old badhabit of always using the default password by the user is changed.Moreover, an original activation password is subjected to strengthcheck, and a too simple password is not allowed to be used foractivating the device, such that an illegal user cannot remotely controlthe monitoring apparatus by using the default password or guessing acurrent password that is too simple, thereby improving passwordsecurity. Besides, the present disclosure combines a RSA asymmetricencryption algorithm and an AES symmetric encryption algorithm in aprocess of encrypting an original activation password, and it isdifficult to crack the activation password input by the user from anetwork, thereby further enhancing a security of an activation process.

FIG. 7 is a structural block diagram of a remote activation system basedon a network monitoring apparatus according to an exemplary embodimentof the present disclosure.

Specifically, the remote activation system based on the networkmonitoring apparatus in this exemplary embodiment of the presentdisclosure includes: a client terminal 1 and a network monitoringapparatus 2.

The client terminal 1 is arranged to receive an original activationpassword of the network monitoring apparatus 2, and encrypt the originalactivation password. Specifically, the client terminal 1 sends a publickey generated via a first algorithm to the network monitoring apparatus2. The network monitoring apparatus 2 encrypts an original random stringgenerated by the network monitoring apparatus via the public key togenerate an encrypted random string. The client terminal 2 decrypts theencrypted random string returned by the network monitoring apparatus 2by using a private key generated via the first algorithm to obtain theoriginal random string. The client terminal 1 sets the obtained originalrandom string as a key of a second algorithm, encrypts the originalactivation password via the second algorithm to obtain an encryptedactivation password, and sends the encrypted activation password to thenetwork monitoring apparatus 2.

Specifically, the original activation password is encrypted in a modebased on an IP address and a mode based on an MAC address.

The network monitoring apparatus 2 is arranged to receive the encryptedactivation password from the client terminal 1, decrypt the encryptedactivation password to obtain the original activation password input bythe user, determine whether the original activation password meets apredetermined password strength requirement, activate when the originalactivation password meets the predetermined password strengthrequirement, the network monitoring apparatus and set the originalactivation password as an administrator password, and return informationindicating that the network monitoring apparatus is successfullyactivated to the client terminal 1. After receiving the informationindicating that the network monitoring apparatus is successfullyactivated, the client terminal 1 sends a prompt to the user to indicatethat the network monitoring apparatus is successfully activated.

It is important to note that the remote activation system based on thenetwork monitoring apparatus of the present disclosure includes: anactivation mode based on an IP address and an activation mode based onan MAC address according to different network interaction modes. Thedifference between two activation modes lies in network interaction, andencryption modes of the two activation modes are consistent.

(1) Activation mode based on the IP address

The client terminal 1 adopts a first algorithm to generate a public key,sends the public key to the network monitoring apparatus 2, decrypts arandom string that is returned by the network monitoring apparatus 2 andencrypted via the public key, sets an obtained original random string asa key of a second algorithm, encrypts an original activation passwordvia the second algorithm to obtain an encrypted activation password, andsends the encrypted activation password to the network monitoringapparatus 2.

(2) Activation mode based on the MAC address

The client terminal receives MAC addresses reported by multiple networkmonitoring apparatuses, adopts a first algorithm to generate a publickey and a private key, and sends the public key and the MAC address toeach of the network monitoring apparatuses. Then, a random string thatis returned by each of the network monitoring apparatuses and encryptedvia the public key is decrypted, and an obtained original random stringis set as a key of a second algorithm. An original activation passwordis encrypted via the second algorithm, and the encrypted activationpassword is sent to each of the network monitoring apparatuses.

In one embodiment of the present disclosure, in the activation modebased on the IP address and the activation mode based on the MACaddress. The first algorithm is a RSA asymmetric encryption algorithm,and the second algorithm is an AES symmetric encryption algorithm.

FIG. 8 is an activation flowchart of a remote activation system based ona network monitoring apparatus according to an exemplary embodiment ofthe present disclosure.

At step S81, a user sends a booting instruction to a non-activatednetwork monitoring apparatus 2 via a client terminal 1, and afterreceiving the booting instruction, the non-activated network monitoringapparatus 2 completes a booting action.

At step S82, the user further sends a network access request to thenon-activated network monitoring apparatus 2 via the client terminal 1.Since the network monitoring apparatus is not activated, access fails,and then the user executes an activation operation firstly.

At step S83, the client terminal 1 encrypts an original activationpassword of the network monitoring apparatus 2 to obtain an activationpassword, and sends the encrypted activation password to the networkmonitoring apparatus 2.

At step S84, the network monitoring apparatus 2 receives the encryptedactivation password from the client terminal 1, decrypts the encryptedactivation password, obtains the original activation password, anddetermines whether the original activation password meets apredetermined password strength requirement. When the originalactivation password meets the predetermined password strengthrequirement, step S85 is executed.

At step S85, the network monitoring apparatus 2 activates the networkmonitoring apparatus, and sets the original activation password as anadministrator password.

At step S86, the network monitoring apparatus 2 returns informationindicating that the network monitoring apparatus is successfullyactivated to the client terminal 1.

At step S87, the client terminal 1 sends a specific network operationrequest to the network monitoring apparatus 2 already activated.

At step S88 the network monitoring apparatus 2 returns, in response tothe network operation request, a network operation response to theclient terminal 1.

In the remote activation system based on the network monitoringapparatus provided in at least some embodiments of the presentdisclosure, a default password is not set for the network monitoringapparatus, and the network monitoring apparatus cannot be used beforebeing activated, that is, the network monitoring apparatus is able to beused after being activated by a user, so that an old bad habit of alwaysusing the default password by the user changed. Moreover, an originalactivation password input by the user is subjected to strength check,and a too simple password is not allowed to be used for activating thedevice, such that an illegal user cannot remotely control the monitoringapparatus by using the default or guessing a current password that istoo simple, thereby improving password security. Besides, the presentdisclosure combines a RSA asymmetric encryption algorithm and ansymmetric encryption algorithm in a process of encrypting an originalactivation password input by a user, and it is difficult to crack theactivation password input by the user from a network, thereby furtherenhancing a security of an activation process.

It will be appreciated that the above-mentioned exemplary embodiments ofthe present disclosure are used for exemplarily illustrating orexplaining the principle of the present disclosure, and does not formlimitation to the present disclosure. Therefore, any modification,equivalent replacements and improvements made without departing from thespirit and scope of the present disclosure should fall within the scopeof protection of the present disclosure. Besides, the appended claims ofthe present disclosure aim to cover all change and modification examplesfalling within the scope and boundary of the appended claims or anequivalent form of this scope and boundary.

In one embodiment of the present disclosure, a computer terminal isprovided. The computer terminal is any one computer terminal device in acomputer terminal group. Alternatively, in the present embodiment, thecomputer terminal is also replaced with a terminal device such as amobile terminal.

Alternatively, in the present embodiment, the computer terminal islocated on at least one network device in multiple network devices of acomputer network.

In the present embodiment, the computer terminal executes program codesfor the following steps in the remote activation method of a networkmonitoring apparatus: receiving an encrypted activation password sent bya client terminal; decrypting the encrypted activation password toobtain an original activation password; determining whether the originalactivation password meets a predetermined password strength requirement;when the original activation password meets the predetermined passwordstrength requirement, activating the network monitoring apparatus andsetting the original activation password as an administrator password;and returning information indicating that the network monitoringapparatus is successfully activated to the client terminal.

Alternatively, the computer terminal includes: one or more processors, amemory and a transmission apparatus.

The memory is arranged to store a software program and a component, suchas a program instruction/component corresponding to a remote activationmethod of a network monitoring apparatus in at least one embodiment ofthe present disclosure. The processor executes various functionapplications and data processing by running the software program and thecomponent stored in the memory, namely implementing the above-mentionedremote activation method of a network monitoring apparatus. The memoryincludes a high-speed Random Access Memory (RAM), and further includes anon-volatile memory such as one or more disk storage apparatuses, aflash, or other non-volatile solid memories. In some examples, thememory further includes memories remotely arranged relative to theprocessor. These remote memories are connected to a terminal via anetwork. The examples for the network include, but not limited to,internet, intranet, local area network, mobile communication network andcombination of the internet, the intranet, the local area network andthe mobile communication network.

The transmission apparatus is arranged to receive or send data via anetwork. A specific example for the network includes at least one of acable network and a radio network. In an example, the transmissionapparatus includes a Network Interface Controller (NIC), which isconnected to a router via a network cable and other network devices, soas to communicate with the internet or the local area network. In anexample, the transmission apparatus is a Radio Frequency (RF) component,arranged to communicate with the internet in a radio manner.

Specifically, the memory is arranged to store predetermined actionconditions, predetermined permission user information, and applicationprograms.

The processor calls information and application programs stored by thememory via the transmission apparatus, so as to execute program codesfor the method steps of each alternative or exemplary embodiment in theabove-mentioned method embodiments.

A person of ordinary skill in the art may understand that the computerterminal is also a terminal device such as a smart phone (such asAndroid phone and an iOS phone), a tablet computer, a palmtop, MID, anda PAD.

A person of ordinary skill in the art may understand that all or somesteps in each method in the above-mentioned embodiments are completed byinstructing relevant hardware of the terminal device through a program.And the program is stored in a computer-readable storage medium, and thestorage medium includes: a flash disk, a Read-Only Memory an RAM, amagnetic disk or an optical disk.

In one embodiment of the present disclosure, a storage medium is alsoprovided. Alternatively, in the present embodiment, the storage mediumis arranged to store program codes executed for a remote activationmethod of a network monitoring apparatus provided in the above-mentionedmethod embodiments and apparatus embodiments.

Alternatively, in the present embodiment, the storage medium is locatedin any one computer terminal in a computer terminal group in a computernetwork, or located in any one mobile terminal in a mobile terminalgroup.

Alternatively, in the present embodiment, the storage medium is arrangedto store program codes for executing the following steps: receiving anencrypted activation password sent by a client terminal; decrypting theencrypted activation password to obtain an original activation password;determining whether the original activation password meets apredetermined password strength requirement; when the originalactivation password meets the predetermined password strengthrequirement, activating the network monitoring apparatus and setting theoriginal activation password as an administrator password; and returninginformation indicating that the network monitoring apparatus issuccessfully activated to the client terminal.

Alternatively, in the present embodiment, the storage medium is alsoarranged to store program codes for executing each exemplary oralternative method step provided in a remote activation method of anetwork monitoring apparatus.

The serial numbers of the embodiments of the present disclosure are usedfor descriptions, and do not represent the preference of theembodiments.

In the above-mentioned embodiments of the present disclosure,descriptions for each embodiment are emphasized respectively, and partswhich are not elaborated in a certain embodiment may refer to relevantdescriptions of other embodiments.

In some embodiments provided by the present application, it will beappreciated the disclosed technical contents are implemented in othermodes. Herein, the apparatus embodiment described above is schematic.For example, division of the elements is division of logical functions,and there are additional division modes during actual implementation.For example, a plurality of elements or components are combined orintegrated to another system, or some features are omitted or are notexecuted. In addition, displayed or discussed mutual coupling or directcoupling or communication connection is performed via some interfaces,and indirect coupling or communication connection between elements orcomponents are in an electrical form or other forms.

The elements illustrated as separate parts are or are not physicallyseparated. Parts for element display are or are not physical elements.That is, the parts are located at a place or are distributed on aplurality of elements. The aims of the solutions of the embodiments areachieved by selecting some or all elements according to actualrequirements.

In addition, all function elements in all embodiments of the presentdisclosure are integrated in a processing element, or each elementexists separately and physically, or two or more elements are integratedin a element. The integrated element is implemented in a hardware formor is implemented in a form of software function element.

When being implemented in a form of software function element and issold or used as an independent product, the integrated element is storedin a computer-readable storage medium. Based on this understanding, thetechnical solutions of the present disclosure are substantially embodiedin a form of software product or parts contributing to the related artor all or some of the technical solutions are embodied in a form ofsoftware product, and the computer software product is stored in astorage medium which includes a plurality of instructions enabling acomputer device (which is a personal computer, a server, a networkdevice or the like) to execute all or some of the steps of the methodaccording to each embodiment of the present disclosure. Theabove-mentioned storage medium includes: various media capable ofstoring program codes, such as a U disk, an ROM, an RAM, a mobile harddisk, a magnetic disk or an optical disk.

The above are exemplary implementation manners of the presentdisclosure. It should be pointed out that a person of ordinary skill inthe art can also make some improvements and modifications withoutdeparting from the principle of the present These improvements andmodifications should fall within the scope of protection of thedisclosure.

1. A remote activation method of a network monitoring apparatus,comprising: receiving an encrypted activation password sent by a clientterminal; decrypting the encrypted activation password to obtain anoriginal activation password; determining whether the originalactivation password meets a predetermined password strength requirement;when the original activation password meets the predetermined passwordstrength requirement, activating the network monitoring apparatus andsetting the original activation password as an administrator password;and returning information indicating that the network monitoringapparatus is successfully activated to the client terminal.
 2. Theremote activation method of the network monitoring apparatus as claimedin claim 1, wherein receiving the encrypted activation password sent bythe client terminal comprises: receiving a public key sent by the clientterminal and generated via a first algorithm, encrypting an originalrandom string generated by the network monitoring apparatus via thepublic key to generate an encrypted random string, returning theencrypted random string to the client terminal; and receiving anactivation password sent by the client terminal and encrypted via asecond algorithm, wherein the activation password is generated byencrypting an original activation password via the second algorithm,wherein a key of the second algorithm is the original random string; orwherein decrypting the encrypted activation password to obtain theoriginal activation password comprises: decrypting the activationpassword via a second algorithm to obtain the original activationpassword.
 3. (canceled)
 4. The remote activation method of the networkmonitoring apparatus as claimed in claim 2, before receiving the publickey sent by the client terminal and generated via the first algorithm,further comprising: reporting a Media Access Control (MAC) address tothe client terminal, wherein the MAC address is used for uniquelyidentifying an identity of the network monitoring apparatus; or whereinwhile returning the encrypted random string to the client terminal, theremote activation method further comprises: reporting an MAC address tothe client terminal, wherein the MAC address is used for uniquelyidentifying an identity of the network monitoring apparatus; or whereinthe first algorithm is a RSA asymmetric encryption algorithm.
 5. Theremote activation method of the network monitoring apparatus as claimedin claim 4, wherein receiving the public key sent by the client terminaland generated via the first algorithm comprises: receiving a public keymatched with an MAC address of the network monitoring apparatus, sent bythe client terminal and generated via the first algorithm; or whereinreceiving the activation password sent by the client terminal andencrypted via the second algorithm comprises: receiving an activationpassword matched with an MAC address of the network monitoringapparatus, sent by the client terminal and encrypted via the secondalgorithm. 6-8. (canceled)
 9. The remote activation method of thenetwork monitoring apparatus as claimed in claim 2, wherein the secondalgorithm is an Advanced Encryption Standard (AES) symmetric encryptionalgorithm.
 10. A network monitoring apparatus, comprising: a hardwareprocessor coupled with a memory and configured to execute programinstructions stored on the memory; wherein the program instructionscomprise: receiving an encrypted activation password sent by a clientterminal; decrypting the encrypted activation password to obtain anoriginal activation password; determining whether the originalactivation password meets a predetermined password strength requirement;activating, when the original activation password meets thepredetermined password strength requirement, the network monitoringapparatus and set the original activation password as an administratorpassword; and returning information indicating that the networkmonitoring apparatus is successfully activated to the client terminal.11. The network monitoring apparatus as claimed in claim 10, wherein theprogram instructions further comprise: receiving a public key sent bythe client terminal and generated via a first algorithm, and returningan encrypted random string to the client terminal, wherein the encryptedrandom string is obtained by encrypting, by the encryption anddecryption element, a original random string generated by the networkmonitoring apparatus via the public key; and receiving an activationpassword sent by the client terminal and encrypted via a secondalgorithm, wherein the activation password is generated by encrypting,by the client terminal, the original activation password via the secondalgorithm, and a key of the second algorithm is the original randomstring; or wherein the program instructions further comprise: decryptingthe encrypted activation password via a second algorithm to obtain theoriginal activation password.
 12. (canceled)
 13. The network monitoringapparatus as claimed in claim 11, wherein the program instructionsfurther comprise: before receiving the public key sent by the clientterminal and generated via the first algorithm, reporting a Media AccessControl (MAC) address to the client terminal, wherein the MAC address isused for uniquely identifying an identity of the network monitoringapparatus; or wherein the program instructions further comprise: besidesreturning the encrypted random string to the client terminal, reportingan MAC address to the client terminal, wherein the MAC address is usedfor uniquely identifying an identity of the network monitoringapparatus; or wherein the program instructions further comprise:receiving an activation password matched with an MAC address of thenetwork monitoring apparatus, sent by the client terminal and encryptedvia the second algorithm; or wherein the first algorithm is anasymmetric encryption RSA algorithm.
 14. The network monitoringapparatus as claimed in claim 13, wherein the program instructionsfurther comprise: receiving a public key matched with an MAC address ofthe network monitoring apparatus, sent by the client terminal andgenerated via the first algorithm. 15-17. (canceled)
 18. The networkmonitoring apparatus as claimed in claim 11, wherein the secondalgorithm is a symmetric encryption Advanced Encryption Standard (AES)algorithm.
 19. An encryption method of a network monitoring apparatusbased on a client terminal, comprising: receiving an original activationpassword of a network monitoring apparatus; encrypting the originalactivation password; sending an encrypted activation password to thenetwork monitoring apparatus; and after the network monitoring apparatusis activated successfully according to the encrypted activationpassword, receiving information, indicating that the network monitoringapparatus is successfully activated, returned from the networkmonitoring apparatus.
 20. The encryption method of the networkmonitoring apparatus based on the client terminal as claimed in claim19, wherein before sending the encrypted activation password to thenetwork monitoring apparatus, the encryption method further comprises:generating a public key and a private key via a first algorithm, sendingthe public key to the network monitoring apparatus, wherein the publickey is adopted by the network monitoring apparatus to encrypt theoriginal random string generated by the network monitoring apparatus togenerate an encrypted random string; receiving the encrypted randomstring sent by the network monitoring apparatus, decrypting theencrypted random string via the private key to obtain the originalrandom string, and setting the original random string as a key of asecond algorithm; and encrypting the original activation password viathe second algorithm to obtain the encrypted activation password. 21.The encryption method of the network monitoring apparatus based on theclient terminal as claimed in claim 20, before sending the public key tothe network monitoring apparatus, further comprising: receiving a MediaAccess Control (MAC) address sent by the network monitoring apparatus,wherein the MAC address is used for uniquely identifying an identity ofthe network monitoring apparatus; or wherein while receiving theencrypted random string sent by the network monitoring apparatus, theencryption method further comprises: receiving an MAC address sent bythe network monitoring apparatus, wherein the MAC address is used foruniquely identifying an identity of the network monitoring apparatus; orwherein the first algorithm is a RSA asymmetric encryption algorithm,and the second algorithm is an Advanced Encryption Standard (AES)symmetric encryption algorithm.
 22. The encryption method of the networkmonitoring apparatus based on the client terminal as claimed in claim21, wherein sending the public key to the network monitoring apparatuscomprises: sending a public key matched with an MAC address of thenetwork monitoring apparatus to the network monitoring apparatus; orwherein sending the encrypted activation password to the networkmonitoring apparatus comprises: sending an activation password matchedwith the MAC address of the network monitoring apparatus to the networkmonitoring apparatus. 23-25. (canceled)
 26. A client terminal,comprising: a hardware processor coupled with a memory and configured toexecute program instructions stored on the memory; wherein the programinstructions comprise: receiving an original activation password of anetwork monitoring apparatus; encrypting the original activationpassword; and sending an encrypted activation password to the networkmonitoring apparatus, and receive, after the network monitoringapparatus is activated successfully according to the encryptedactivation password, information, indicating that the network monitoringapparatus is successfully activated, returned from the networkmonitoring apparatus.
 27. The client terminal as claimed in claim 26,wherein the program instructions comprise: generating a public key and aprivate key via a first algorithm, and sending the public key to thenetwork monitoring apparatus via the interface, wherein the public keyis adopted by the network monitoring apparatus to encrypt the originalrandom string generated by the network monitoring apparatus to generatean encrypted random string; receiving the encrypted random string sentby the network monitoring apparatus, decrypting the encrypted randomstring via the private key to obtain the original random string, andsetting the obtained original random string as a key of a secondalgorithm; and encrypting the original activation password via thesecond algorithm to obtain the encrypted activation password.
 28. Theclient terminal as claimed in claim 27, wherein the program instructionscomprise: before sending the public key to the network monitoringapparatus, receive receiving a Media Access Control (MAC) address sentby the network monitoring apparatus, wherein the MAC address is used foruniquely identifying an identity of the network monitoring apparatus; orwherein the program instructions comprise: receiving an MAC address sentby the network monitoring apparatus, wherein the MAC address is used foruniquely identifying an identity of the network monitoring apparatus; orwherein the first algorithm is a RSA asymmetric encryption algorithm,and the second algorithm is an Advanced Encryption Standard (AES)symmetric encryption algorithm.
 29. The client terminal as claimed inclaim 28, wherein the program instructions comprise: sending a publickey matched with an MAC address of the network monitoring apparatus tothe network monitoring apparatus; or wherein the program instructionscomprise: sending an activation password matched with an MAC address ofthe network monitoring apparatus to the network monitoring apparatus.30-32. (canceled)
 33. A remote activation system based on a networkmonitoring apparatus, comprising a client terminal, arranged to receivean original activation password of a network monitoring apparatus, andencrypt the original activation password; and the network monitoringapparatus, arranged to receive an encrypted activation password from theclient terminal, decrypt the encrypted activation password to obtain theoriginal activation password, determine whether the original activationpassword meets a predetermined password strength requirement, activate,when the original activation password meets the predetermined passwordstrength requirement, the network monitoring apparatus, set the originalactivation password as an administrator password, and return informationindicating that the network monitoring apparatus is successfullyactivated to the client terminal; the client terminal, further arrangedto send, after receiving the information indicating that the networkmonitoring apparatus is successfully activated, a prompt indicating thatthe network monitoring apparatus is successfully activated.
 34. Theremote activation system based on the network monitoring apparatus asclaimed in claim 33, wherein the client terminal is arranged to receivethe original activation password of a network monitoring apparatus andencrypt the original activation password comprises the following step:sending a public key generated via a first algorithm to the networkmonitoring apparatus, wherein the public key is adopted by the networkmonitoring apparatus to encrypt the original random string generated bythe network monitoring apparatus to generate an encrypted random string;and decrypting the encrypted random string returned by the networkmonitoring apparatus by using a private key generated via the firstalgorithm to obtain the original random string, setting the originalrandom string as a key of a second algorithm, encrypting the originalactivation password via the second algorithm to obtain an encryptedactivation password, and sending the encrypted activation password tothe network monitoring apparatus. 35-36. (canceled)